https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T18:31:03.792004+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-27016 CVE-2026-27016 — LibreNMS has Stored XSS in Custom OID - unit parameter missing strip_tags() 2026-10-09T18:31:03.808082+00:00

Affected: librenms

LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Versions 24.10.0 through 26.1.1 are vulnerable to Stored XSS via the unit parameter in Custom OID. The Custom OID functionality lacks strip_tags() sanitization while other fields (name, oid, datatype) are sanitized. The unsanitized value is stored in the database and rendered without HTML escaping. This issue is fixed in version 26.2.0.